AMENDMENTS TO THE CLAIMS 
Amended claims follow: 

1 . (Currently Amended) A method of [[ ]]transferring a requested file for a 
computer malware scanning software comprising the steps of: 

receiving a request to transfer a file from [[the]]a computer malware scanning 
software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the randomly accessed portion of the requested file is 
requested utilizing a byte range technique; 

transferring the requested portion of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file: and 

determining whether information associated with the requested file has changed; 

wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism; 

wherein the data associated with the request from the computer malware scanning 
software comprises a plurality of randomly accessed portions of the requested file . 

2. (Currently Amended) The method of claim 1 , wherein the request to transfer the 
requested file from the computer malware scanning software comprises a request to 
transfer the requested file from an external system. 



3. (Original) The method of claim 2, wherein the external system is 
communicatively connected via a network. 
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4. (Original) The method of claim 3, wherein the network comprises the Internet. 

5. (Currently Amended) The method of claim 4, wherein the step of transferring the 
requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

6. (Original) The method of claim 5, wherein the session is a hypertext transfer 
protocol session. 

7. (Previously Presented) The method of claim 6, wherein the hypertext transfer 
protocol session uses the byte range technique. 

8. (Previously Presented) The method of claim 7, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 

9. (Original) The method of claim 8, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

1 0. (Original) The method of claim 9, wherein an indication that the requested portion 
of the requested file cannot be randomly accessed comprises an error indication or a 
transfer of the entire requested file. 



11. (Cancelled) 
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1 2. (Previously Presented) The method of claim 1 , wherein the information comprises 
hypertext transfer protocol entity tags or last modified timestamp information. 

13. (Original) The method of claim 12, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

14. (Previously Presented) The method of claim 13, further comprising the step of: 
transferring an entirety of the requested file. 

15. (Currently Amended) The method of claim 1 , further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

requested file. 

1 6. (Currently Amended) The method of claim 1 5, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 

17. (Currently Amended) The method of claim 1 6, wherein the step of delivering the 
requested file to the user system comprises the steps of: 

determining whether an entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire file has 
not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

1 8. (Currently Amended) The method of claim 1 7, wherein the step of transferring 
those portions of the requested file that have not been transferred comprises the step of: 
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initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 

19. (Original) The method of claim 18, wherein the session is a hypertext transfer 
protocol session. 

20. (Previously Presented) The method of claim 19, wherein the hypertext transfer 
protocol session uses the byte range technique. 

2 1 . (Currently Amended) A system [[ ]]for transferring a requested file for a 
computer malware [[ ]]scanning software comprising: 

a processor operable to execute computer program instructions; 
a memory operable to store computer program instructions executable by the 
processor; and 

computer program instructions stored in the memory and executable to perform 
the steps of: 

receiving a request to transfer a file from [[the]]a computer malware scanning 
software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the randomly accessed portion of the requested file is 
requested utilizing a byte range technique; 

transferring the requested portion of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file; and 

determining whether information associated with the requested file has changed; 
wherein the byte range technique turns a serial download mechanism into a 
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random access file mechanism; 

wherein the data associated with the request from the computer malware scanning 
software comprises a plurality of randomly accessed portions of the requested file . 

22. (Currently Amended) The system of claim 2 1 , wherein the request to transfer the 
requested file from the computer malware scanning software comprises a request to 
transfer the requested file from an external system. 

23. (Original) The system of claim 22, wherein the external system is 
communicatively connected via a network. 

24. (Original) The system of claim 23, wherein the network comprises the Internet. 

25. (Currently Amended) The system of claim 24, wherein the step of transferring the 
requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

26. (Original) The system of claim 25, wherein the session is a hypertext transfer 
protocol session. 

27. (Previously Presented) The system of claim 26, wherein the hypertext transfer 
protocol session uses the byte range technique. 

28. (Previously Presented) The system of claim 27, further comprising the steps of: 
determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 
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29. (Original) The system of claim 28, wherein the requested portion of the requested 
file cannot be transferred because the requested portion of the requested file cannot be 
randomly accessed. 

30. (Original) The system of claim 29, wherein an indication that the requested 
portion of the requested file cannot be randomly accessed comprises an error indication 
or a transfer of the entire requested file. 

31. (Cancelled) 

32. (Previously Presented) The system of claim 21 , wherein the information 
comprises hypertext transfer protocol entity tags or last modified tirnestamp information. 

33. (Original) The system of claim 32, further comprising the step of: 
restarting the requests from the computer malware scanning software for data. 

34. (Previously Presented) The system of claim 33, further comprising the step of: 
transferring an entirety of the requested file. 

35. (Currently Amended) The system of claim 2 1 , further comprising the step of: 
performing the steps of claim 1 in response to a request from a user system for the 

requested file. 

36. (Currently Amended) The system of claim 35, further comprising the steps of: 
scanning at the computer malware scanning software the data comprising a 

portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 



37. 



(Currently Amended) The system of claim 36, wherein the step of delivering the 
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requested file to the user system comprises the steps of: 

determining whether an entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire 
requested file has not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

38. (Currently Amended) The system of claim 37, wherein the step of transferring 
those portions of the requested file that have not been transferred comprises the step of: 

initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 

39. (Original) The system of claim 38, wherein the session is a hypertext transfer 
protocol session. 

40. (Previously Presented) The system of claim 39, wherein the hypertext transfer 
protocol session uses the byte range technique. 

4 1 . (Currently Amended) A computer program product [[ ]]for transferring a 
requested file for a computer malware scanning software comprising: 

a tangible computer readable storage medium; 

computer program instructions, recorded on the computer readable storage 
medium, executable by a processor, for performing the steps of 

receiving a request to transfer a file from [[the]]a computer malware scanning 
software; 

receiving a request from the computer malware scanning software for data 
comprising a randomly accessed portion of the requested file selected in a random order 
by the computer malware scanning software from among portions of the requested file 
and based on a portion of the requested file to be scanned by the computer malware 
scanning software, wherein the randomly accessed portion of the requested file is 
requested utilizing a byte range technique; 



-9- 



transferring the requested portion of the requested file and supplying the 
requested data to the computer malware scanning software to fulfill the request for data 
comprising a portion of the requested file; 

tracking information associated with each transfer of a requested portion of the 
requested file; and 

determining whether information associated with the requested file has changed; 

wherein the byte range technique turns a serial download mechanism into a 
random access file mechanism; 

wherein the data associated with the request from the computer malware scanning 
software comprises a plurality of randomly accessed portions of the requested file . 

42. (Currently Amended) The computer program product of claim 4 1 , wherein the 
request to transfer the requested file from the computer malware scanning software 
comprises a request to transfer the requested file from an external system. 

43. (Original) The computer program product of claim 42, wherein the external 
system is communicatively connected via a network. 

44. (Original) The computer program product of claim 43, wherein the network 
comprises the Internet. 

45. (Currently Amended) The computer program product of claim 44, wherein the 
step of transferring the requested portion of the requested file comprises the step of: 

initiating a session with the external system to obtain the requested portion of the 
requested file. 

46. (Original) The computer program product of claim 45, wherein the session is a 
hypertext transfer protocol session. 

47. (Previously Presented) The computer program product of claim 46, wherein the 
hypertext transfer protocol session uses the byte range technique. 
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48. (Previously Presented) The computer program product of claim 47, further 
comprising the steps of: 

determining that the requested portion of the requested file cannot be transferred; 

and 

transferring an entirety of the requested file and supplying the requested data to 
the computer malware scanning software to fulfill the request for data comprising a 
portion of the requested file. 

49. (Original) The computer program product of claim 48, wherein the requested 
portion of the requested file cannot be transferred because the requested portion of the 
requested file cannot be randomly accessed. 

50. (Original) The computer program product of claim 49, wherein an indication that 
the requested portion of the requested file cannot be randomly accessed comprises an 
error indication or a transfer of the entire requested file. 

51. (Cancelled) 

52. (Previously Presented) The computer program product of claim 4 1 , wherein the 
information comprises hypertext transfer protocol entity tags or last modified timestamp 
information. 

53. (Original) The computer program product of claim 52, further comprising the step 
of: 

restarting the requests from the computer malware scanning software for data. 

54. (Previously Presented) The computer program product of claim 53, further 
comprising the step of: 

transferring an entirety of the requested file. 
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55. (Currently Amended) The computer program product of claim 4 1 , further 
comprising the step of: 

performing the steps of claim 1 in response to a request from a user system for the 
requested file. 

56. (Currently Amended) The computer program product of claim 55, further 
comprising the steps of: 

scanning at the computer malware scanning software the data comprising a 
portion of the requested file to determine if the requested file includes a computer 
malware; and 

delivering the requested file to the user system in response to determining that the 
requested file does not include a computer malware. 

57. (Currently Amended) The computer program product of claim 56, wherein the 
step of delivering the requested file to the user system comprises the steps of: 

determining whether an entirety of the requested file has been transferred; 

starting delivery of the requested file to the user system even if the entire 
re quested file has not been transferred; and 

transferring those portions of the requested file that have not been transferred and 
delivering those portions of the requested file once they have been transferred. 

58. (Currently Amended) The computer program product of claim 57, wherein the 
step of transferring those portions of the requested file that have not been transferred 
comprises the step of: 

initiating a session with the external system to obtain those portions of the 
requested file that have not been transferred. 

59. (Original) The computer program product of claim 58, wherein the session is a 
hypertext transfer protocol session. 

60. (Previously Presented) The computer program product of claim 59, wherein the 
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hypertext transfer protocol session uses the byte range technique. 

61. (Cancelled) 

62. (Cancelled) 

63. (Currently Amended) The method of claim [[62]]J_, wherein the plurality of 
randomly accessed portions of the requested file are read in a random order. 

64. (Currently Amended) The method of claim 1 , wherein a system call handler 
intercepts system level calls made by the computer malware scanning software and 
simulates system level function calls utilized by the computer malware scanning software 
to determine whether the requested file includes the computer malware. 



